"Esoteric Software" matching MCP servers:

Enables AI agents to inspect and manage Windows software, including listing installed and running apps, searching catalogs, installing, upgrading, uninstalling, managing startup apps, exporting backups, and checking exploited vulnerabilities. It also supports a read-only mode for safe discovery.

SSWP MCP — Deterministic software attestation for AI-augmented development. Witness any repo through a 5-gate pipeline, adversarially probe dependencies, and produce self-verifying .sswp.json attestations. Fleet registry across 131 nodes with tamper-proof audit ledger and FTS5 search. Agent-native — one tool call from Hermes, Claude, or Cline.

Enables AI assistants to read live macOS processes and identify monitoring software, including Chinese enterprise EDR/DLP/MDM tools, through a read-only MCP server.

Exposes the MITRE ATT\&CK framework to LLMs and AI assistants via the Model Context Protocol, enabling querying of techniques, tactics, groups, software, and mitigations.

Enables AI assistants to manage software licenses through natural language commands by connecting to the ExisOne licensing platform.

Gates every AI agent tool call against your policy before it runs, then writes a hash-chained, tamper-evident record of what was decided and what happened. Anyone can verify that record offline, without your software, your systems or any key you hold.

Read-only MCP server for the Action1 RMM REST API, enabling access to endpoints, missing updates, vulnerabilities, installed software, policies, automations, and reports.

Enables LLMs to perform software composition analysis including license detection, vulnerability assessment, SBOM generation, and policy validation using the SEMCL.ONE toolchain.

Checks public IPs, domains, CVE IDs and software versions for confirmed vulnerabilities and exposure, using NVD version ranges, CISA KEV, EPSS, distro backports and published exploits. All API keys are optional.

Enables AI-native access to the MITRE ATT\&CK framework, allowing LLMs and agents to query techniques, threat groups, software, and generate ATT\&CK Navigator layers for threat intelligence and security workflows.

Enables AI assistants to query Cork's cyber-insurance API for MSPs, including client warranty status, cyber scores, risk/compliance events, software vulnerabilities, integrations, invoices, and installer metadata via MCP tools.

Enables AI assistants to check software end-of-life dates and support status using the endoflife.date API, providing accurate information on software lifecycle, security status, and upgrade recommendations in real-time.

Performs vulnerability scans using Trivy to generate Software Bill of Materials (SBOM) in CycloneDX format. It enables automated security auditing and dependency tracking through the Model Context Protocol.

Lets AI assistants manage software license keys end to end, including issuing, suspending, revoking, freeing machines and IPs, blocking leaked keys, looking up customers, building automations, reading validation stats, and adding license checks to code.

Enables AI assistants to inspect FOSSA organizations and answer software composition analysis questions through a read-only MCP server.

Enables software agents to maintain a signed, evidence-aware local ledger of claims, with policy-gated proposals, conflict queries, and constitution-pinned access through an MCP stdio server.

Enables read-only inspection of local Windows and Linux systems for host, resource, network, service, software, identity, startup, certificate, SSH key metadata, and environment-variable name evidence through MCP tools. It normalizes platform outputs into stable schemas while avoiding arbitrary shell execution, credential reads, secret values, or remediation.

Enables MCP-compatible assistants to query Ecuadorian legislation and perform local static audits of software repositories for privacy, security, and compliance risks.

Enables AI-assisted Windows digital forensics analysis including parsing Windows Event Logs (EVTX), analyzing registry hives (SAM, SYSTEM, SOFTWARE), and remotely collecting artifacts via WinRM with built-in security queries and forensic reference data.

A Model Context Protocol server that performs Trivy scans to generate Software Bill of Materials (SBOM) in CycloneDX format.

Enables orchestrating secure software development pipelines with domain-specific compliance (HIPAA, PCI-DSS, etc.), generating pseudocode, threat models, and CI/CD from user stories via natural language.

Deterministic agentic data firewall that secures, monitors, and controls AI agent interactions with data and software via MCP, preventing data leaks.

Provides trust scores, comparisons, and search for software entities, AI tools, packages, and MCP servers using Nerq's Trust Score system.

An MCP server that lets AI agents manage a local watchlist of the software and exact versions you run, then check them against vulnerability and exploitation data. It enables adding, updating and listing watched items, pulling current alerts or recent findings, and asking whether a given CVE affects anything on the list.

Enables AI coding agents to dynamically inspect running software — API hooks, syscall summaries, memory inspection, and HTTP/TLS/DNS reconstruction from live traffic or pcaps — across Linux, macOS, and Android targets. Every finding is returned as a structured Evidence Record with observation, artifacts, confidence, and explicit limitations, so agents cite proof rather than guess.

Enables AI assistants to query an organization's device posture, compliance, policies, and software/CVE status through a remote, read-only, OAuth-secured MCP endpoint.

Enables searching the NIST NVD for CVEs, retrieving full CVE details, checking software for known vulnerabilities, and searching the CPE database.

Enables AI agents to read managed endpoints, their software and hardware audit, patch status, agent procedures, alarms, tickets, organizations and machine groups, and, with explicit confirmation, deploy patches or run an agent procedure on an endpoint. Supports stateless multi-tenant access with per-request credentials for the VSA REST API.

Enables searching and retrieving software and hardware weaknesses, attack patterns, mitigations, code examples, and reference hierarchies from the MITRE CWE and CAPEC catalogs, including CWE to CAPEC to ATT&CK mappings. Runs over STDIO or Streamable HTTP with no API key required.

Provides read-only access to a live, sourced feed of publicly reported breaches, ransomware claims, exploited CVEs, malicious packages and connectivity drops, each tagged with an honest status. Enables agents to check whether a user's software stack is affected and retrieve plain-text fix runbooks for one-click remediation.

Provides an MCP stdio interface to 253 security tools across software and physical layers, with isolated engagement workspaces, serial sessions, firmware triage, scoped HTTP/browser automation, and hash-chained audit evidence for authorized red- and blue-team work.

Enables AI assistants to check installed developer software for known security incidents and retrieve reviewed, read-only fix procedures for affected versions.

Enables AI clients to inspect installed software packages and saved browser traffic through read-only local parsers, producing structured evidence about application structure, dependencies, endpoints, and observed authentication schemes.

Automates 85-95% of the Secure Software Development Lifecycle (SSDLC) planning phase through multi-role AI orchestration, enabling business analysis, threat modeling, test strategy design, and security code review.

An MCP server that helps software makers meet EU Cyber Resilience Act obligations, including scope classification, Article 13(2) risk assessment, Annex I requirements with evidence, vulnerability and incident tracking with Article 14 reporting clocks, and Annex VII technical file assembly.

The open-source AI agent control plane and software factory: govern every tool and model call

Enables AI agents and MCP-compliant clients to audit software bills of materials and quarantine supply-chain malicious package dependencies using Snyk and Socket.dev.

Enables AI assistants to query software supply chain compliance data, including asset status, security vulnerabilities, and evidence lineage. It allows for natural language analysis of compliance posture, policy violations, and deployment blockers across an organization.

Backend server that issues and validates alphanumeric software licenses tied to hardware IDs for SAP MCP servers (hana-b1, sap-btp, sap-cpi), storing products, licenses, and telemetry in PostgreSQL with online validation of expiry, revocation, and hardware matching.

Aziel Runtime is a node-meshed MCP software orchestration suite for digital forensics, auditing, provenance, research, intelligence-support, and secure agent workflows, with a single gated execution path, compartmentalized engines, verifiable receipts, temporal integrity, and explicit capability refusal. It is not merely an API aggregator or generic tool router.